CVE-2005-2742

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow attackers with physical access to gain access to the desktop and bypass the "Require password to wake this computer from sleep or screen saver" setting.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.htmlVendor Advisory
http://secunia.com/advisories/16920/Patch, Vendor Advisory
http://www.auscert.org.au/5509Vendor Advisory
http://www.ciac.org/ciac/bulletins/p-312.shtmlUS Government Resource
http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.htmlVendor Advisory
http://secunia.com/advisories/16920/Patch, Vendor Advisory
http://www.auscert.org.au/5509Vendor Advisory
http://www.ciac.org/ciac/bulletins/p-312.shtmlUS Government Resource

Timeline

Published: Oct 26, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-27437.5The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system li CVE-2005-27445.1Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remo CVE-2005-27455.0Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized memory in a message, wh CVE-2005-27465.0Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to i CVE-2005-27477.5Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute CVE-2005-27482.1The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting CVE-2005-27492.1Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownershi CVE-2005-27502.1Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the CVE-2005-27512.1memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membe CVE-2005-27522.1An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers CVE-2005-27535.1Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes CVE-2005-27545.1Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Impro